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Listing and Amendments to the Claims 

This listing of claims will replace the claims that were published in the PCT 
Application: 

[001] (Currently amended) Method A method of enciphering/deciphering a 
message to be exchanged between a sender and a receiver by way of a 
communication network, the sender and the receiver both being one among a 
secure device ^-and a defined client device (€-j}-in a network of client 
devices (C, Q ), the method comprising the steps of: 

- performing operations of asymmetric cryptography by the secure device 
and by the defined client device (^respectively witn the aid of a private key 
(fV-dd-and of a public key (n t/ c ^, the private key being different from the 
public key, and 

- dispatching (62, 8 1) at least one public data item tft i7 -GIBj)-from the defined 
client device (QHo the secure device-^, 

characterized in that i t Wherein the method comprises furthermore, 
during each send/receive of a message enciphered by the secure device, a 
step of determining the private key (n ir di}-corresponding to the public key ^B i7 
ej)-of the defined client device-(€j), on the basis of a secret master key (KK) 
stored in the secure device, and the or each public data item fa , CID i) 
dispatched by the defined client device (€t). 

[002] (Currently amended) Method T he method of enciphering/deciphering a 
message according to Claim 1, characterized in tha t wherein the step of 
dispatching (62, 8 1) the or each public data item comprises a step of 
dispatching a part (fn} of the public key, this part of the public key forming a 
first part of the private key. 
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[003] (Currently amended) Method The method of enciphering/deciphering a 
message according to ony one of Cla i ms 1 and 2 claim 1, character i zed i n 
that- wherein the step of dispatching (62, 8 1) the or each public data item 
comprises a step of dispatching an identifier (€IDj)-of the client device (€j), 
and the step of determining the private key comprises a step of calculating a 
second part (dj)-of the private key on the basis of the said dispatched 
identifier. 

[004] (Currently amended) Method The method of enciphering/deciphering a 
message according to Claim 3, character i zed in that wherein t he step of 
determining the private key (ftirdi) corresponding to the public key (niT-e,) of 
the client device, comprises a step of enciphering (44; 61, 8 3) the result 
(ECID ,) of a function applied to the identifier (GIB;) of the defined client 
device (€»), by a symmetric algorithm, with the aid of the secret master key 
(MK). 

[005] (Currently amended) Method T he method of enciphering/deciphering a 
message according to Claim 4, characterized i n tha t wherein the step of 
determining the private key far^d corresponding to the public key (fi»r-ei} of 
the client device, comprises a step of selecting (45, 65, 8 1) the second part 
(di) of the private key, by a deterministic calculation unit {8}, on the basis of 
the result of the said enciphering of the result (ECID, ) of a function applied to 
the identifier (€4©*) of the defined client device 

[006] (Currently amended) Method The method of enciphering/deciphering a 
message according to Claim 5, characterized in that wherein the step of 
selecting the second part (di) of the private key, by the deterministic 
algorithm, is performed by a selection of a number such that: 
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- this number is less than the result of the said encipherment of the result 
(ECID ,) of a function applied to the identifier (GiBj) of the defined client 
device (€j), 

- this number is the closest to the result of the said encipherment of the 
result (ECID i) of a function applied to the identifier (€1©;) of the defined client 
device (€j), and is prime to a list of prime numbers. 

[007] (Currently amended) Method T he method o f enciphering/deciphering a 
message according to any one of Claims 3 to 6 claim 3 . characterized in that 
wherein it comprises a step of destruction (19, 67, 87) of the identifier (€4©j) 
of the defined client device (€») and of all the data to , q„ d„ ECID (/ c„ n ^ 
calculated on the basis of the identifier so as to determine the private key. 

[008] (Currently amended) Method T he method of enciphering/deciphering a 
message according to any one of the preced i ng claims, characterized i n that 
claim 1 wherein the cryptography operations comprise an operation for 
identifying a message comprising the following steps: 

- signature of the message (85), by the secure device with the aid of the 
private key (f»irdi) determined during the step of determining the private key, 

- transmission of the signature of the message and of the message (86) to 
the client device for verification of this signature, and 

- verification of the signature (87) of the message, by the client device, with 
the aid of the said public key (f^re*). 

[009] (Currently amended) Method T he method of enciphering/deciphering a 
message according to nny one of the preceding c l aims claim 1. characterized 
in that wherein the cryptography operations comprise an operation for 
securing a message comprising the following steps: 
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- encipherment (6±) of a message (m), by the client device (Q), with the aid 
of the public key fared, 

- transmission (62) of the enciphered message to the secure device (i), and 

- decipherment (66) of the message enciphered by the secure device (±), 
with the aid of the private key (fV-4») determined during the step of 
determining a private key. 

[010] (Currently amended) Method T he method of enciphering/deciphering a 
message according to any one of Cloims 3 to Q claim 3 , character i zed in that 
wherein it comprises a prior phase of personalizing the said defined client 
device (€*), which comprises the following steps: 

- generation, by the secure device (i), of a unique secret master key (MK) 
and of an identifier (GEO*) specific to the said defined client device (d) and 
able to identify it, 

- calculation of the said public key (fv-et) of the defined client device (€,) by a 
calculation module (5) on the basis of the second part fa) of the private key. 

[Oil] (Currently amended) Method The method o f enciphering/deciphering a 
message according to Claim 10, in which the personalization phase 
furthermore comprises the following steps: 

- selection (46) of two secret data consisting of two large prime numbers p if 
qi, such that (prl) x (qrl) is prime to the second part fa) of the private key 
of the defined client device (G»), and 

- calculation (48) of a modulus r\\ of the defined client device (€♦) such that: 

ni = Pi x qj, and 

- calculation (48) of a part fa) of the public key by an extended Euclid 
algorithm on the basis of the or of each secret data item pj, q { and of the 
modulus ^ of the defined client device (€,). 
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[012] (Currently amended) Secure A secure device fl) able to exchange a 
message with a defined client device (€j) of a network of client devices (€j 7 
€j), over a communication network, the secure device being able to receive at 
least one public data item (CID„ n i7 specific to the said defined client device 
(d) and dispatched by the latter prior to any exchange of messages, the 
secure device fl) comprising: 

- means for performing operations of asymmetric cryptography with the aid of 
a private key far-4d corresponding to a public key (fv-ej) stored in the 
defined client device (G-j) 

characterized in tha t wherein it comprises, furthermore: 

- secure means of storage (3) of a master key (MK), 

- means (4) of determination of the said private key (dir-n^ on the basis of 
the master key (MK) and of the or of each public data item (CID t , n fl 
dispatched. 

[013] (Currently amended) Secure T he secure device according to Claim 12, 
character i zed in tha t wherein the public data item (CID„ n fl comprises a part 
fa) of the public key of the said defined client device and/or an identifier 
(€49^ of the defined client device. 

[014] (Currently amended) Secure T he secure device according to Claim 13, 
character i zed in that wherein the private key is a mixed key comprising a first 
part to) corresponding to a part of the public key tor-ed of the said defined 
client device (€,} and a second secret part {d»} calculated on the basis of the 
master key (MK) and of the identifier (€4©j) of the defined client device. 

[015] (Currently amended) Seeufe- The secure device according to any one of 
Claims 12 to 11 claim 12. characterized i n that wherein t he means for 
performing operations of asymmetric cryptography with the aid of the private 
key (di7-Ri) determined comprise: 
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- means of signature (5) of a message (m), and 

- means of encipherment (6) of a message (m). 

[016] (Currently amended) Secure T he secure device according to any one of 
Cla i ms 11 to 15 claim 14, in which the means of determination (4) of the 
private key comprise furthermore: 

- a unit for symmetric encipherment £7-}, with the aid of the master key (MK), 
able to encipher the result (ECID ^ of a function applied to the identifier (€49*) 
of the defined client device (€-*), and/or 

- a unit for calculation (8) of a deterministic algorithm for selecting the 
second secret part (df) of the private key on the basis of the result of the 
encipherment produced by the unit (7)-for symmetric encipherment. 

[017] (Currently amended) Seewe - The secure device according to any one 
of Claims 14 to 16 claim 14, characterized in that wherein it furthermore 
comprises a means of initialization of the client devices of the network, the 
said means of initialization comprising: 

- a means of random generation (2) of a unique master key (MK) and of a 
plurality of mutually distinct identifiers (€4 % CID, ), each identifier being apt 
to characterize a unique client device (€i) of the client device network, 

- a unit for calculation (9) able to select two secret data items (Pij-qi) as a 
function of the value of the second secret part (di) of the private key and to 
calculate a first part (fir) of the public key, and 

- a unit for calculation (40) of the second part fe) of the public key, by an 
Extended Euclid algorithm, on the basis of the secret data fptr-qd/ of the 
second part (dj) of the private key and of the first part (fi ( ) of the public key. 

[018] (Currently amended) Computer A division program comprising 
instructions for the execution of the method steps for enciphering/deciphering 
a message according to any one of Claims 1 to 11 claim 1 . when the program 
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is executed on a secure device embodied on the basis of a programmable 
calculator. 

[019] (Currently amended) Recording A recording medium usable on a 
secure device embodied on the basis of a programmable calculator on which 
is recorded the program according to Claim 18. 
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